Draft — to be reviewed by a qualified professional before publication.
1. Who is responsible for your data
The data controller for the processing described in this policy is:
Optcatch
Via Attio Labeone 16, 00175 Rome, Italy
Email: support@optcatch.com
In this policy, “Optcatch”, “we”, “us” and “our” mean the data controller named above; “you” means a visitor of optcatch.com, a customer, or someone who contacts us.
2. The short version
- optcatch.com has no analytics, no marketing or tracking cookies and no newsletter. Fonts are served from our own domain.
- Our hosting provider, Cloudflare, processes technical request data (such as IP addresses) to deliver and protect the site.
- When you buy Optcatch Pro, the checkout is run by Freemius, which acts as the reseller (merchant of record) and processes your order and payment.
- The Optcatch plugin stores your contacts, consent records and campaigns in your own WordPress database. We never receive that data.
- The plugin only shares data with Freemius if a site admin opts in, or when a Pro licence is activated.
- If you email us, we use your message to answer you.
3. Data on your WordPress site is yours
The Optcatch plugin (free and Pro) runs entirely on your own WordPress site. The leads it captures from your forms, the contacts you import, their consent records, segments, templates and campaign data are stored in your site’s database and are not sent to us.
Campaign emails are sent through the email accounts you connect yourself (for example Gmail, Microsoft 365, SendGrid or any SMTP server). Those providers process the emails under their own terms; we are not involved.
For your contacts’ personal data, you are the controller and we do not process it on your behalf. You are responsible for having a lawful basis (usually consent) to collect and email those contacts, for informing them in your own privacy notice, and for answering their requests. Please do not send us your contacts’ personal data (for example in a support request). If you do anyway, we use it only to handle that request and delete it afterwards.
4. Data we process
4.1 When you visit optcatch.com
optcatch.com is a static website hosted on Cloudflare Pages. To deliver the pages and protect them against attacks, Cloudflare processes technical data of every request, such as your IP address, the date and time, the page requested, your browser’s user agent and the referring page. We do not use this data to identify or profile you.
We do not use analytics tools, advertising pixels, social media plugins or embedded third-party content, and we do not load fonts from third-party services. The one exception is the Freemius checkout script on the pricing page, described in section 4.2.
4.2 When you buy Optcatch Pro
When you open the pricing page, your browser loads the Freemius checkout script from checkout.freemius.com, so that the checkout can open quickly and Freemius can help you recover an unfinished purchase. Freemius therefore receives the request, including your IP address and browser details, and may use its own cookies or similar browser storage as described in its policies. The checkout window itself opens only when you click a “Buy” button. Everything you enter in the checkout (such as your name, email address, billing address, VAT number and payment details) goes to Freemius, which processes your order and payment as the reseller of Optcatch Pro. Card and other payment details are handled by Freemius and its payment providers; we never see your full card number.
Freemius shares with us the information we need to provide your licence and support and to keep our records, such as your name, email address, country, the plan and licence you bought, the amounts, and the status of your subscription and payments.
Freemius also processes this data under its own privacy policy.
4.3 When you use the plugin
Optional Freemius opt-in. The plugin includes the Freemius SDK, which may show an opt-in message in your WordPress admin. If you skip it, no data is shared and the plugin works the same. If a site admin opts in, the following data is sent to Freemius, which shares it with us:
- Profile: the WordPress admin’s first name, last name and email address;
- Website: homepage URL and site title, WordPress and PHP versions, and site language;
- Plugin: the Optcatch version and Freemius SDK version, and whether the plugin is active, deactivated or uninstalled;
- Plugins and themes list: names, slugs and versions of installed plugins and themes, and whether they are active (the opt-in screen lets you see this permission).
Freemius explains this opt-in on its own page: What data is shared when you opt in. You can opt out at any time from the Plugins screen of your WordPress admin; data collection then stops.
Pro licence activation and updates. Activating an Optcatch Pro licence connects the site to Freemius. To check the licence and deliver Pro updates, the site sends Freemius your licence key, the site URL and the account and site information needed to link the licence to your site (similar to the opt-in data above). This happens for as long as the licence is active on the site.
Free plugin updates are delivered by WordPress.org through WordPress’s own update system, under the WordPress.org privacy policy.
4.4 When you contact us
If you email support@optcatch.com, we process your email address, name, the content of your message and any details you add (for example your site URL or licence information) to answer you and help you.
5. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Deliver and secure optcatch.com | Request data (IP address, user agent, time, page) | Legitimate interest in running a secure website (Art. 6(1)(f)) |
| Sell Pro licences, deliver licences and updates | Order, account and licence data | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, accounting and tax records | Order and payment data | Legal obligation (Art. 6(1)(c)) |
| Plugin opt-in data (compatibility, product improvement, important notices) | Opt-in data listed in section 4.3 | Your consent given in the opt-in (Art. 6(1)(a)); you can withdraw it at any time |
| Answer support requests | Your email and its contents | Contract (Art. 6(1)(b)) for customers; legitimate interest in answering enquiries (Art. 6(1)(f)) for everyone else |
| Prevent fraud and abuse, defend legal claims | Order, licence and request data as needed | Legitimate interest (Art. 6(1)(f)) |
We do not sell personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing.
6. Who receives data
- Cloudflare (Cloudflare, Inc.) — hosting and content delivery of optcatch.com. Cloudflare privacy policy.
- Freemius (Freemius, Inc., USA) — checkout, payments, sales tax/VAT, invoices, subscriptions, licensing, Pro updates and the optional plugin opt-in. Freemius privacy policy.
- Our email provider — hosts the support@optcatch.com mailbox and processes the messages you send us.
- Advisers and authorities — our accountants and legal advisers, and public authorities where the law requires it.
Service providers process data on our behalf under data processing terms, or as independent controllers where they decide how to use the data themselves (for example Freemius for its role as seller, and payment providers).
7. International transfers
Some recipients, including Freemius and Cloudflare, are based in the United States or may process data outside the European Economic Area. Where this happens, the transfer is protected by an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework, where the recipient is certified) or by the European Commission’s Standard Contractual Clauses. You can ask us for more information about these safeguards.
8. How long we keep data
- Website request logs are kept by Cloudflare for a short period, as set out in its policies.
- Order, invoice and accounting records are kept for as long as Italian tax and accounting law requires (generally ten years).
- Licence and account data are kept while you have an active licence and afterwards for as long as needed to handle renewals, refunds or claims.
- Plugin opt-in data: opting out or uninstalling the plugin stops further collection. Data already sent is retained by Freemius according to the Freemius privacy policy. You can ask us at support@optcatch.com to request its deletion.
- Support emails are kept for as long as needed to help you and for up to 24 months after the conversation ends, so we can follow up on the same issue.
9. Cookies
optcatch.com does not set analytics, advertising or tracking cookies, so we do not show a cookie banner. Cloudflare may set strictly necessary security cookies to protect the site from bots and attacks. On the pricing page the Freemius checkout script is loaded from checkout.freemius.com, and Freemius may use its own cookies or similar browser storage for the checkout and for recovering an unfinished purchase, both when the page loads and when you open the checkout; see the Freemius cookies policy.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data erased, where the law allows;
- restrict our processing;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time (for example by opting out of the plugin opt-in), without affecting processing that happened before.
To exercise these rights, email support@optcatch.com. We may ask you to confirm your identity. We answer within one month, as required by the GDPR.
If you are a contact of a website that uses Optcatch (for example, you subscribed to its newsletter), that website owner, not us, holds your data. Please contact them directly.
11. Complaints
If you think we handle your data unlawfully, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU country where you live or work. We would appreciate the chance to address your concern first, so please feel free to contact us.
12. Security
We use appropriate technical and organisational measures to protect personal data, such as encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission or storage is completely secure, but we work to protect your data and will act promptly if an incident occurs.
13. Children
Optcatch is a tool for website owners and businesses. Our services are not directed at children and we do not knowingly collect data from children.
14. Changes to this policy
We may update this policy when our services or the law change. We will publish the new version on this page with a new effective date and, for significant changes, inform customers by email.
15. Contact
For any question about this policy or your data, email support@optcatch.com or write to us at the postal address above.
See also our Terms of Service and Refund Policy.